When Agentic Glue Melts: Exploiting Cloudflare Code Mode and Workers

<p class="wp-block-paragraph"><em>By Yarden Porat, Check Point Research</em></p>

<h2 class="wp-block-heading">Key Points</h2>

<ul class="wp-block-list"> <li>Check Point Research analyzed Cloudflare Code Mode, a technique that changes how AI agents use MCP by turning tools into a TypeScript API the model can write code against.</li>

<li>The research uncovered five vulnerabilities in worker